This Privacy Policy describes how bpxch collects, uses, stores, shares, and protects the personal data of users of the bpxch platform. Your privacy matters to us. As a licensed gaming operator, bpxch is legally required to handle personal data responsibly and in compliance with applicable data protection standards. This document tells you exactly what data we hold, why we hold it, who we share it with, and what rights you have over it.
All personal data stored by bpxch is encrypted at rest and in transit using industry-standard TLS 1.3 and AES-256 encryption. Your data is never stored in plain text on any bpxch system.
bpxch does not sell, rent, or trade your personal data to third-party marketers, advertising networks, or data brokers. Your information is used solely for the purposes described in this Privacy Policy.
Registered bpxch account holders have the right to access, correct, and request deletion of their personal data. You can exercise these rights at any time by contacting the bpxch support team.
bpxch processes personal data in accordance with the data protection requirements of its international gaming license. Our data handling practices are subject to periodic regulatory audit.
bpxch retains personal data only for as long as required by its regulatory obligations or the purposes for which it was collected. Retention periods are defined per data category and are set out in this policy.
bpxch will notify you of any material changes to this Privacy Policy via email before those changes take effect. You will never discover significant changes to how your data is handled without prior notice.
bpxch ("bpxch", "we", "us", "our") is the data controller responsible for the personal information collected and processed in connection with the bpxch platform at bpxch.org. As data controller, bpxch determines the purposes and means by which personal data is processed.
bpxch operates under an international gaming license that imposes binding obligations on the platform with respect to the collection, handling, storage, and protection of user data. These obligations form part of the legal framework within which this Privacy Policy is written and applied.
For all data protection enquiries, requests to exercise your rights, or complaints regarding the handling of your personal data, please contact the bpxch data protection team at [email protected] or via the 24/7 live chat support available on the platform.
bpxch collects the following categories of personal data from registered users and platform visitors:
| Data Category | Examples | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, passport details | Mandatory (KYC) |
| Contact Data | Email address, Pakistani mobile number, residential address | Mandatory |
| Financial Data | JazzCash / EasyPaisa account number, bank account details (HBL, UBL, Meezan Bank, Allied Bank, SadaPay), USDT TRC20 wallet address, transaction history | Mandatory (payments) |
| Account Data | Username, hashed password, account preferences, bonus history, session history | Mandatory |
| Gaming Activity Data | Bets placed (including cricket and PSL markets), games played, wins and losses, wagering history | Automatically collected |
| Technical Data | IP address, device type, browser type and version, operating system, network carrier (e.g. Jazz, Zong, Telenor), session timestamps | Automatically collected |
| Communications Data | Live chat transcripts, email correspondence, support ticket records | Where applicable |
| Responsible Gaming Data | Self-exclusion status, deposit limits set, session time alerts configured, cooling-off period records | Where applicable |
bpxch collects personal data through the following means:
bpxch processes personal data under the following legal bases, depending on the purpose of processing:
bpxch uses personal data for the following specific purposes:
bpxch does not sell your personal data. We share personal data only in the following circumstances and with the following categories of recipients:
All third parties with whom bpxch shares personal data are required to process that data in compliance with applicable data protection standards and in accordance with bpxch's instructions. bpxch does not permit third-party data processors to use personal data for their own purposes.
The bpxch platform uses cookies and similar tracking technologies to deliver and improve the platform experience. The following categories of cookies are used:
bpxch implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bpxch will notify you without undue delay via your registered email address, and will notify the relevant regulatory authority as required by applicable law.
bpxch retains personal data for no longer than is necessary for the purposes for which it was collected, subject to applicable minimum retention requirements imposed by the platform's regulatory obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity & KYC documents | 5 years after account closure | Regulatory / AML obligation |
| Financial transaction records | 5 years after transaction date | Regulatory / AML obligation |
| Gaming activity logs | 3 years after account closure | Regulatory / dispute resolution |
| Support communications | 3 years after last contact | Legitimate interest / legal claims |
| Self-exclusion records | 6 years after exclusion period ends | Responsible gaming obligation |
| Marketing consent records | Until consent is withdrawn + 1 year | Consent / legal evidence |
| Technical / session logs | 12 months from session date | Security / fraud prevention |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with bpxch's data disposal procedures. Anonymised data (which cannot be used to identify any individual) may be retained indefinitely for statistical and platform improvement purposes.
bpxch may transfer personal data to, and process personal data in, countries outside Pakistan in connection with the platform's operations. This may occur where bpxch's service providers, game content providers, or data processing infrastructure are located in other jurisdictions.
Where personal data is transferred internationally, bpxch takes appropriate safeguards to ensure that such transfers comply with applicable data protection standards, including:
For further information about the specific safeguards applied to any international transfer of your personal data, please contact the bpxch data protection team at [email protected].
As a registered bpxch account holder, you have the following rights in relation to your personal data. To exercise any of these rights, contact the bpxch support team via live chat or email at [email protected]. bpxch will respond to all valid rights requests within 30 calendar days of receipt.
Request a copy of all personal data bpxch holds about you, including the categories of data, purposes of processing, and recipients.
Request correction of inaccurate or incomplete personal data held by bpxch. You can update many details directly via account settings.
Request deletion of your personal data where bpxch has no lawful basis for continued processing. Note that regulatory retention obligations may limit this right.
Request that bpxch restricts processing of your data in certain circumstances — for example, while a dispute about data accuracy is resolved.
Request your personal data in a structured, machine-readable format for transfer to another service provider where technically feasible.
Object to processing of your data based on legitimate interests — including profiling for marketing purposes. You may also object to fully automated decision-making.
bpxch will not charge a fee for processing rights requests unless a request is manifestly unfounded, excessive, or repetitive. In such cases, bpxch may either charge a reasonable fee or decline the request, in which case you will be notified of the reason for refusal and your right to escalate the matter to the relevant supervisory authority.
The bpxch platform is strictly intended for adults aged 21 years and above. bpxch does not knowingly collect, store, or process personal data of individuals under the age of 21. The platform employs KYC age verification procedures to prevent minors from accessing the service.
If bpxch becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately suspended and all personal data associated with the account will be deleted, subject to any regulatory retention obligations that may require bpxch to retain records of the age verification failure for compliance reporting purposes.
If you have reason to believe that a minor has registered a bpxch account, please contact the bpxch support team immediately at [email protected] so that the matter can be investigated and resolved promptly.
With your consent, bpxch may send you promotional communications about new games, bonus offers, cricket betting promotions, PSL specials, and other platform updates. Marketing communications are sent via email to your registered address and, where you have provided consent, via SMS to your registered Pakistani mobile number.
You may withdraw your consent to receive marketing communications at any time by:
Withdrawal of marketing consent will not affect your ability to use the bpxch platform or receive essential service communications (such as transaction confirmations, security alerts, and account status notifications), which are sent on the basis of contractual necessity rather than consent and cannot be opted out of while your account remains active.
The bpxch platform may contain links to third-party websites or services — for example, links to responsible gaming information resources. This Privacy Policy applies solely to data processed by bpxch through the bpxch platform. bpxch is not responsible for the privacy practices or data handling of any third-party website or service, and we encourage you to review the privacy policies of any third-party sites you visit before providing them with your personal data.
bpxch reserves the right to update or modify this Privacy Policy at any time. The updated policy will be published at bpxch.org/privacy-policy with an updated effective date. Where a change is material — meaning it may significantly affect how your personal data is processed or your rights in relation to it — bpxch will notify you via email to your registered address at least 14 days before the change takes effect.
Your continued use of the bpxch platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the updated policy. If you do not accept any material changes, you should close your bpxch account before the updated policy takes effect by contacting the support team.
This Privacy Policy was last updated on 1 January 2026. Previous versions are available upon written request to [email protected].
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bpxch, please contact us using the following:
If you are not satisfied with bpxch's response to a data protection complaint or rights request, you have the right to escalate the matter to the relevant supervisory authority under the jurisdiction of bpxch's international gaming license. Details of the applicable escalation route are available from the bpxch support team upon request.
For responsible gaming concerns related to data — for example, questions about how self-exclusion records are stored — please visit the Responsible Gaming page for additional guidance.
The bpxch support team can answer any question about how your data is stored or used. Log in to your account to manage your privacy settings, or reach us via live chat any time.
21+ only. Regulated by international gaming license. Play responsibly.